Senior SIEM & Data Security Engineer

East West Bank; San Marino (CA); On-site; USD 115,000 - 160,000; Full time

Job summary

East West Bank is seeking a Cyber Security Engineer to design, implement, and continually enhance the organization’s SIEM and data security capabilities. You will work with IT, compliance, and business teams to ensure logging, monitoring, and incident response align with regulatory requirements and risk posture.

The role requires hands-on Linux experience, scripting for automation, and knowledge of DSPM/DLP, with a focus on reducing noise and improving detection.

Qualifications

• 5+ years of experience in security engineering, with a focus on SIEM platforms.
• Experience with SIEM/DSPM/DLP and related security tools.
• Strong understanding of intrusion detection/prevention systems, firewalls, and endpoint protection.
• Hands-on experience with Linux OS.
• Experience with scripting and automation to optimize SIEM workflows.
• Certifications such as CISSP, CISM, CEH, or GIAC are preferred.
• Knowledge of network infrastructure, including routers, switches, firewalls and associated network protocols and concepts.
• Ability to interact with personnel at all levels and across all business units / organizations, and to understand business imperatives.

Responsibilities

• Engineer, build, and maintain logging infrastructure to support SIEM and Security Operations teams.
• Monitor and manage SIEM performance, ensuring optimal data ingestion, correlation, and alerting.
• Tune and configure SIEM rules to reduce noise and improve detection accuracy.
• Investigate security incidents and lead response efforts as applicable
• Monitor and analyze security logs and events from diverse sources (cloud, network, endpoint)
• Create technically detailed reports on SIEM Status, metrics, and incident trends.
• Familiarity with data classification, DLP, and governance solutions.
• Support data classification, labeling, and handling requirements.
• Assist with DLP policy tuning, monitoring, and alert triage.
• Support data discovery, sensitive data inventory, or DSPM-related activities.
• Partner with business and technology teams to improve data protection controls.
• Support data security metrics, reporting, and governance activities.
• Ensure SIEM logging standards meet regulatory and internal compliance requirements.
• Collaborate with IT Governance, Risk, and Compliance teams to define log retention, access controls, and masking/encryption policies.
• Work with application developers and system owners to ensure proper log generation and forwarding
• Assist internal teams and business partner in optimizing SIEM capabilities and workflows

Skills

SIEM platforms

Security engineering

DSPM

DLP

IDS/IPS

Linux

Scripting

Automation

Tools

SIEM tools

DLP tools

DSPM

Firewalls

Network monitoring

Job description

East West Bank is seeking a Cyber Security Engineer to design, implement, and continually enhance the organization’s SIEM and data security capabilities. You will work with IT, compliance, and business teams to ensure logging, monitoring, and incident response align with regulatory requirements and risk posture.

The role requires hands-on Linux experience, scripting for automation, and knowledge of DSPM/DLP, with a focus on reducing noise and improving detection.